Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/3f25a7a7-5bbb-336a-a266-855eadcb523f.roa
File: 3f25a7a7-5bbb-336a-a266-855eadcb523f.roa (raw, json)
Hash identifier: BA72ESKi8wEWh4HavXzZTopC27Nt9fn0LFaFb6g7ZQU=
Subject key identifier: CA:83:BA:47:3D:23:20:5C:0A:BE:0B:06:95:1B:AF:49:98:BA:BA:04
Certificate issuer: /CN=9a52f880-7957-4bb9-b30a-78f30c289eb1
Certificate serial: 010D0C9F43285848F4F69CCF27AA7467FAFFB680
Authority key identifier: A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/3f25a7a7-5bbb-336a-a266-855eadcb523f.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 16611
IP address blocks: 23.153.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:9c:cf:27:aa:74:67:fa:ff:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a52f880-7957-4bb9-b30a-78f30c289eb1
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=fc4dfea7-1446-419e-9c42-72d47b9f9660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:0a:cd:59:d5:ce:9f:ee:c3:d9:62:d7:7a:
f2:83:3d:4f:9b:ee:09:b5:f0:01:4e:d6:5a:57:03:
ba:cd:90:b3:13:e1:35:d9:95:77:64:02:7a:a5:f1:
88:ed:91:0d:4f:bd:18:d6:03:92:82:3a:7a:b4:3f:
8f:4d:b0:d3:c6:a6:6e:e3:6a:26:ad:ed:64:66:c7:
d8:e5:cc:a8:36:db:ae:60:68:be:9e:4d:b4:25:88:
e0:d2:93:ec:1e:96:3b:3d:5e:ca:b2:ab:9f:68:9d:
b9:9c:b0:63:ba:9e:9a:58:45:1e:0f:64:51:77:8e:
4f:4c:f1:60:cb:fa:7e:81:9c:03:2c:0f:1a:71:f1:
ae:b3:69:3a:71:dc:2f:e7:72:48:9e:90:2d:f0:f3:
e0:4f:20:99:a3:b3:eb:0a:0d:5a:41:55:45:29:e6:
2a:a2:5f:ad:62:60:64:2f:b4:90:6c:44:36:4e:c9:
2a:b2:3b:28:14:ab:16:27:0f:31:fe:0c:03:81:d0:
2a:58:45:9e:7b:94:39:f4:6a:fa:2f:92:ce:78:a1:
48:14:2c:29:bd:67:60:90:08:de:8e:42:48:d9:32:
6c:f5:3a:b7:2d:26:9f:12:b7:54:9e:5b:c9:8f:da:
7b:89:fb:88:de:16:fb:d2:f2:ba:57:a0:46:f8:dc:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:83:BA:47:3D:23:20:5C:0A:BE:0B:06:95:1B:AF:49:98:BA:BA:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/3f25a7a7-5bbb-336a-a266-855eadcb523f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl
X509v3 Authority Key Identifier:
keyid:A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.153.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:fb:15:d9:b1:e2:1e:0e:3c:b3:37:ba:f9:c5:10:2a:99:e0:
9f:96:b1:27:37:a6:b0:f3:dc:74:88:10:8c:1d:be:68:ca:ae:
dd:71:ee:48:1c:b3:7e:32:0c:5e:ea:f4:49:cc:93:56:f2:58:
2f:25:0a:94:7c:fc:fe:48:0d:b3:14:21:0f:ad:ed:c4:64:8a:
da:9d:0f:40:b9:8b:a7:e6:65:22:c5:53:bc:71:79:b8:a9:c7:
ce:da:89:45:30:f6:e6:68:bb:11:81:d8:ab:1f:01:24:bb:e4:
c6:1d:bb:a8:c0:e8:82:52:56:51:8d:5f:02:86:91:c8:2c:d2:
b6:1f:2e:95:89:89:ca:fa:de:2f:a3:77:97:15:0f:26:1b:86:
4c:5e:f9:96:67:8e:ce:25:ec:f3:e6:06:a8:78:96:72:cb:e7:
d1:f9:d5:60:65:2f:56:b3:67:f9:e4:89:42:3a:8d:87:04:f7:
40:f6:e4:f3:9e:a6:42:72:64:7f:9f:89:89:49:89:2e:15:42:
bb:19:9b:92:ff:ba:f4:cd:48:d5:49:2b:d7:72:8a:e3:e6:be:
85:e7:9b:20:7b:fb:d6:ba:86:8c:26:c4:b3:88:24:c8:14:d4:
60:89:6b:a6:c0:2c:01:7e:1d:e6:cc:59:2f:b7:76:8e:13:31:
4a:33:1e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:15:56 2025 by rpki-client